Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/rizZGym-E5loND9ibxTfmV0TUq8.roa
File: rizZGym-E5loND9ibxTfmV0TUq8.roa (raw, json)
Hash identifier: 2EmaiJwLhgBbgki8Y3210kvLRPcR0qBmSTOgTz/vBQI=
Subject key identifier: AE:2C:D9:1B:29:BE:13:99:68:34:3F:62:6F:14:DF:99:5D:13:52:AF
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 2F
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rizZGym-E5loND9ibxTfmV0TUq8.roa
Signing time: Mon 01 Nov 2021 01:28:45 +0000
ROA not before: Mon 01 Nov 2021 01:28:45 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 55900
IP address blocks: 203.23.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Nov 1 01:28:45 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=AE2CD91B29BE139968343F626F14DF995D1352AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:ff:aa:62:db:75:fd:9a:8d:8a:88:64:95:
2a:19:24:2c:25:05:d7:eb:7d:1f:9e:ae:31:fe:61:
55:fe:8f:b0:95:42:a9:bc:d1:ca:34:1d:3e:1f:84:
e7:c4:2b:28:b1:69:15:fe:a3:10:bc:fb:24:a0:4d:
32:dc:a8:c7:a5:c6:f0:e4:a6:04:21:58:62:d2:0c:
03:dd:aa:24:30:79:4c:4b:8a:79:db:6b:f3:90:bf:
70:29:fc:75:18:9e:92:b0:2e:45:69:7d:a3:43:90:
4c:2f:8c:89:c0:eb:ba:5b:ad:09:37:13:25:12:fb:
ed:c6:20:4c:b5:1c:12:70:32:07:78:b6:03:d9:28:
af:43:0e:d3:f0:fa:bc:ac:4e:f0:6b:d9:24:bd:df:
d2:a1:58:f1:3f:d4:76:e8:d5:11:42:9c:57:ba:0c:
5f:cb:68:d3:1c:34:86:ac:be:5d:13:26:83:a2:96:
54:ac:cd:8d:cd:d5:6b:f8:aa:47:17:70:3d:32:0b:
ba:a8:8d:ed:c6:dc:ff:41:f9:d5:ae:dd:0b:f9:99:
3d:c7:7a:eb:37:be:82:20:bd:bd:dd:e4:a7:64:3b:
19:b6:75:fe:85:8b:64:19:cf:da:3d:34:c2:f2:73:
23:d6:d6:df:bb:51:1a:3e:fc:a3:c2:bf:71:77:09:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:D9:1B:29:BE:13:99:68:34:3F:62:6F:14:DF:99:5D:13:52:AF
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rizZGym-E5loND9ibxTfmV0TUq8.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ba:95:9b:e2:03:f0:f7:92:66:fd:5e:ec:37:2f:92:94:d2:
5b:e8:fb:6a:22:2d:2d:69:f8:5f:65:16:9c:2b:ba:f1:d4:ea:
69:4a:02:79:de:88:89:20:cc:90:41:b4:a6:e1:d0:96:7e:3a:
15:8b:7e:0e:87:eb:ca:6a:e1:db:4d:ec:82:f1:17:29:13:7b:
29:24:34:3b:a0:16:f5:c2:fd:0a:12:28:c5:e9:b9:e2:f3:76:
3d:61:b0:47:8b:63:f6:a9:59:05:6b:9e:b1:c6:20:22:d4:7c:
45:3e:b0:42:56:de:87:77:26:cc:80:9f:00:95:de:a4:35:2b:
c7:b1:42:b9:bb:24:f5:03:f2:eb:f7:a4:0a:71:02:8d:4e:15:
38:d2:b1:cd:da:62:ba:21:ae:57:56:8b:bd:f1:25:dc:2e:a1:
c9:0c:49:80:ea:11:06:fe:c0:50:e0:bb:f4:c5:3f:ec:1e:b1:
4d:1d:60:d8:24:d4:dc:2e:ee:c4:b9:5e:62:2e:d9:b1:29:66:
32:14:63:fe:01:4a:dd:1a:ef:14:57:ac:e5:b9:47:37:cf:35:
bc:2f:7c:c3:95:42:e6:c0:1f:04:8d:b7:95:e6:1e:f4:b2:b3:
d8:15:04:b0:8f:18:f9:58:e7:c1:a5:4c:98:5f:f7:8d:17:f0:
3b:11:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org